CVE-2005-0659Group Phpbb vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 35.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 2
Latest updateMay 1

Description

phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

NVDphpbb_group/phpbb30 versions+29

🔴Vulnerability Details

1
GHSA
GHSA-h9g3-pc8m-ccv7: phpBB 22022-05-01